Other documentation
A good but in my eyes incomplete howto is Replacing NIS with Kerberos and LDAP HOWTO
For SSO aspects, the article Using Kerberos 5 for Single Sign-On Authentication is good to read.
A very good book for understanding LDAP and also with a chapter about replacing NIS is LDAP System Admnistration from Gerald Carter
;){kind=link}